windmill-components 1.687.0 → 1.695.1

package/package/components/Login.svelte

@@ -20,7 +20,7 @@ import Skeleton from './common/skeleton/Skeleton.svelte';
 import Button from './common/button/Button.svelte';
 import { sameTopDomainOrigin } from '../cookies';
 import { isValidLogoutRedirect } from '../logoutRedirect';
-let { rd = undefined, email = $bindable(undefined), password = $bindable(undefined), error = undefined, popup = false, firstTime = false, onLoginSuccess = undefined } = $props();
+let { rd = undefined, email = $bindable(undefined), password = $bindable(undefined), error = undefined, popup = false, firstTime = false, autoRedirect = true, onLoginSuccess = undefined } = $props();
 const providers = [
     {
         type: 'github',
@@ -69,6 +69,8 @@ let logins = $state(undefined);
 let saml = $state(undefined);
 let smtpConfigured = $state(undefined);
 let disablePasswordLogin = $state(false);
+let autoRedirecting = $state(false);
+let oauthFlowDone = false;
 async function login() {
     if (!email || !password) {
         sendUserToast('Please fill in both email and password', true);
@@ -167,12 +169,14 @@ async function loadLogins() {
         disablePasswordLogin = false;
         console.error('Could not load password login setting', disabledResult.reason);
     }
+    let autoLogin = undefined;
     if (loginsResult.status === 'fulfilled') {
         logins = loginsResult.value.oauth.map((login) => ({
             type: login.type,
             displayName: login.display_name || login.type
         }));
         saml = loginsResult.value.saml;
+        autoLogin = loginsResult.value.auto_login;
     }
     else {
         logins = [];
@@ -182,6 +186,29 @@ async function loadLogins() {
     showPassword =
         !disablePasswordLogin &&
             ((logins?.length === 0 && !saml) || (email != undefined && email.length > 0));
+    if (autoRedirect && autoLogin && !error && !shouldSkipAutoRedirect()) {
+        if (autoLogin === 'saml' && saml) {
+            autoRedirecting = true;
+            if (!redirectSaml())
+                autoRedirecting = false;
+        }
+        else if (logins?.some((l) => l.type === autoLogin)) {
+            autoRedirecting = true;
+            if (!storeRedirect(autoLogin)) {
+                autoRedirecting = false;
+                sendUserToast('Popup blocked — please click the sign-in button to continue.', true);
+            }
+        }
+    }
+}
+function shouldSkipAutoRedirect() {
+    try {
+        const params = new URLSearchParams(window.location.search);
+        return params.get('no_sso') === '1';
+    }
+    catch {
+        return false;
+    }
 }
 loadLogins();
 $effect(() => {
@@ -233,17 +260,23 @@ function processPopupData(data) {
         sendUserToast(data.error, true);
     }
     else if (data.type === 'success') {
-        onLoginSuccess?.();
+        finishOauthFlow('postMessage');
     }
 }
 function handleStorageEvent(event) {
     if (event.key === 'oauth-success') {
         try {
-            processPopupData(JSON.parse(event.newValue));
+            const data = JSON.parse(event.newValue);
             console.log('oauth-success from storage');
             // Clean up
             localStorage.removeItem('oauth-success');
             window.removeEventListener('storage', handleStorageEvent);
+            if (data?.type === 'success') {
+                finishOauthFlow('storage');
+            }
+            else {
+                processPopupData(data);
+            }
         }
         catch (e) {
             console.error('Could not process oauth-success from storage', e);
@@ -253,11 +286,22 @@ function handleStorageEvent(event) {
         console.log('Storage event', event.key);
     }
 }
+function finishOauthFlow(via, win) {
+    if (oauthFlowDone)
+        return;
+    oauthFlowDone = true;
+    console.log(`oauth: signaled via ${via}`);
+    if (win && !win.closed)
+        win.close();
+    window.removeEventListener('message', popupListener);
+    window.removeEventListener('storage', handleStorageEvent);
+    onLoginSuccess?.();
+}
 onDestroy(() => {
     window.removeEventListener('message', popupListener);
     window.removeEventListener('storage', handleStorageEvent);
 });
-function storeRedirect(provider) {
+function persistRd() {
     if (rd) {
         try {
             localStorage.setItem('rd', rd);
@@ -266,26 +310,86 @@ function storeRedirect(provider) {
             console.error('Could not persist redirection to local storage', e);
         }
     }
+}
+function storeRedirect(provider) {
+    persistRd();
     let url = base + '/api/oauth/login/' + provider + (popup ? '?close=true' : '');
     console.log('storeRedirect', popup, url);
     if (popup) {
         localStorage.setItem('closeUponLogin', 'true');
         window.addEventListener('message', popupListener);
         window.addEventListener('storage', handleStorageEvent);
-        window.open(url, '_blank', 'popup');
+        const win = window.open(url, '_blank', 'popup');
+        if (!win) {
+            window.removeEventListener('message', popupListener);
+            window.removeEventListener('storage', handleStorageEvent);
+            return false;
+        }
+        // Safety net for Safari: when the popup is opened without a fresh user
+        // gesture (auto-login), ITP can partition cookies/localStorage between
+        // popup and parent, so neither the close cookie, the postMessage, nor
+        // the localStorage 'oauth-success' signal reaches us. The session
+        // cookie is set same-origin and isn't subject to that partitioning, so
+        // polling whoami catches the success and lets us force-close the popup.
+        pollForLoginSuccess(win);
+        return true;
     }
     else {
         localStorage.setItem('closeUponLogin', 'false');
         window.location.href = url;
+        return true;
     }
 }
+function pollForLoginSuccess(win) {
+    const startedAt = Date.now();
+    const interval = setInterval(async () => {
+        if (oauthFlowDone) {
+            clearInterval(interval);
+            return;
+        }
+        if (Date.now() - startedAt > 5 * 60 * 1000) {
+            clearInterval(interval);
+            console.log('oauth: poll timed out after 5 minutes');
+            return;
+        }
+        if (win.closed) {
+            clearInterval(interval);
+            console.log('oauth: popup closed before login completed');
+            return;
+        }
+        try {
+            await UserService.getCurrentEmail();
+        }
+        catch {
+            return;
+        }
+        clearInterval(interval);
+        finishOauthFlow('poll', win);
+    }, 1500);
+}
+function redirectSaml() {
+    if (!saml) {
+        sendUserToast('No SAML login available', true);
+        return false;
+    }
+    persistRd();
+    window.location.href = saml;
+    return true;
+}
 $effect(() => {
     error && sendUserToast(escapeHtml(error), true);
 });
 </script>
 
 <div class="bg-surface px-4 py-8 border sm:rounded-lg sm:px-10">
-	<div class="grid {logins && logins.length > 2 ? 'grid-cols-2' : ''} gap-4">
+	{#if autoRedirecting}
+		<p class="text-sm text-center text-secondary py-4">Signing you in…</p>
+	{/if}
+	<div
+		class="grid {logins && logins.length > 2 ? 'grid-cols-2' : ''} gap-4 {autoRedirecting
+			? 'hidden'
+			: ''}"
+	>
 		{#if !logins}
 			{#each Array(4) as _}
 				<Skeleton layout={[0.5, [2.375]]} />
@@ -313,29 +417,10 @@ $effect(() => {
 			{/each}
 		{/if}
 		{#if saml}
-			<Button
-				variant="default"
-				btnClasses="mt-2 w-full"
-				on:click={() => {
-					if (saml) {
-						if (rd) {
-							try {
-								localStorage.setItem('rd', rd)
-							} catch (e) {
-								console.error('Could not persist redirection to local storage', e)
-							}
-						}
-						window.location.href = saml
-					} else {
-						sendUserToast('No SAML login available', true)
-					}
-				}}
-			>
-				SSO
-			</Button>
+			<Button variant="default" btnClasses="mt-2 w-full" on:click={redirectSaml}>SSO</Button>
 		{/if}
 	</div>
-	{#if !disablePasswordLogin && (saml || (logins && logins.length > 0))}
+	{#if !autoRedirecting && !disablePasswordLogin && (saml || (logins && logins.length > 0))}
 		<div class={classNames('center-center', logins && logins.length > 0 ? 'mt-6' : '')}>
 			<Button
 				size="xs"
@@ -349,7 +434,7 @@ $effect(() => {
 		</div>
 	{/if}
 
-	{#if showPassword && !disablePasswordLogin}
+	{#if !autoRedirecting && showPassword && !disablePasswordLogin}
 		<div>
 			{#if firstTime}
 				<p class="text-xs text-center w-full pb-4 text-secondary">

package/package/components/Login.svelte.d.ts

@@ -5,6 +5,7 @@ interface Props {
     error?: string | undefined;
     popup?: boolean;
     firstTime?: boolean;
+    autoRedirect?: boolean;
     onLoginSuccess?: () => void;
 }
 declare const Login: import("svelte").Component<Props, {}, "email" | "password">;

package/package/components/Path.svelte

@@ -4,7 +4,7 @@ const lastMetaUsed = writable(undefined);
 
 <script lang="ts">import { pathToMeta } from '../common';
 import { localeConcatAnd, pluralize } from '../utils';
-import { AppService, FlowService, FolderService, ResourceService, ScheduleService, ScriptService, HttpTriggerService, VariableService, WebsocketTriggerService, KafkaTriggerService, PostgresTriggerService, NatsTriggerService, MqttTriggerService, SqsTriggerService, GcpTriggerService, EmailTriggerService } from '../gen';
+import { AppService, FlowService, FolderService, ResourceService, ScheduleService, ScriptService, HttpTriggerService, VariableService, WebsocketTriggerService, KafkaTriggerService, PostgresTriggerService, NatsTriggerService, MqttTriggerService, SqsTriggerService, GcpTriggerService, AzureTriggerService, EmailTriggerService } from '../gen';
 import { superadmin, userStore, workspaceStore } from '../stores';
 import { createEventDispatcher, getContext, untrack } from 'svelte';
 import { writable } from 'svelte/store';
@@ -226,6 +226,12 @@ async function pathExists(path, kind) {
             path: path
         });
     }
+    else if (kind === 'azure_trigger') {
+        return await AzureTriggerService.existsAzureTrigger({
+            workspace: $workspaceStore,
+            path: path
+        });
+    }
     else if (kind === 'email_trigger') {
         return await EmailTriggerService.existsEmailTrigger({
             workspace: $workspaceStore,

package/package/components/Path.svelte.d.ts

@@ -1,4 +1,4 @@
-type PathKind = 'resource' | 'script' | 'variable' | 'flow' | 'schedule' | 'app' | 'raw_app' | 'http_trigger' | 'websocket_trigger' | 'kafka_trigger' | 'postgres_trigger' | 'nats_trigger' | 'mqtt_trigger' | 'sqs_trigger' | 'gcp_trigger' | 'email_trigger';
+type PathKind = 'resource' | 'script' | 'variable' | 'flow' | 'schedule' | 'app' | 'raw_app' | 'http_trigger' | 'websocket_trigger' | 'kafka_trigger' | 'postgres_trigger' | 'nats_trigger' | 'mqtt_trigger' | 'sqs_trigger' | 'gcp_trigger' | 'azure_trigger' | 'email_trigger';
 interface Props {
     fullNamePlaceholder?: string | undefined;
     namePlaceholder?: string;

package/package/components/RunsPage.svelte

@@ -218,7 +218,8 @@ async function cancelJobs(uuidsToCancel, forceCancel = false) {
     const uuids = await JobService.cancelSelection({
         workspace: $workspaceStore ?? '',
         requestBody: uuidsToCancel,
-        forceCancel: forceCancel
+        forceCancel: forceCancel,
+        allWorkspaces: filters.val.all_workspaces || undefined
     });
     selectedIds = [];
     jobsLoader?.loadJobs(true, true);

package/package/components/S3FilePickerInner.svelte

@@ -567,53 +567,51 @@ $effect.pre(() => {
 					{/if}
 				</div>
 			{:else}
-				<div class="p-4 gap-2">
-					<Section
-						label={((p) => (p.startsWith(rootPath) ? p.slice(rootPath.length) : p))(
-							fileMetadata.fileKey
-						)}
-						breakAll
-					>
-						{#snippet action()}
-							<div class="flex gap-2">
-								{#if filePreview !== undefined}
-									{#if !hideS3SpecificDetails}
-										<Button
-											title="Download file from S3"
-											variant="default"
-											href={`${base}/api/w/${$workspaceStore}/job_helpers/download_s3_file?file_key=${encodeURIComponent(fileMetadata?.fileKey ?? '')}${storage ? `&storage=${storage}` : ''}`}
-											download={fileMetadata?.fileKey.split('/').pop() ?? 'unnamed_download.file'}
-											startIcon={{ icon: Download }}
-											iconOnly={true}
-										/>
-									{/if}
-									{#if !readOnlyMode}
-										<Button
-											title="Move file"
-											variant="default"
-											on:click={() => {
-												moveDestKey = fileMetadata?.fileKey ?? ''
-												moveModalOpen = true
-											}}
-											startIcon={{ icon: MoveRight }}
-											iconOnly={true}
-										/>
-									{/if}
-									{#if !readOnlyMode || allowDelete}
-										<Button
-											title="Delete file"
-											variant="default"
-											on:click={() => {
-												deletionModalOpen = true
-											}}
-											startIcon={{ icon: Trash }}
-											iconOnly={true}
-										/>
-									{/if}
+				<div class="px-3 py-2 flex flex-col gap-2">
+					<div class="flex flex-row items-center justify-between gap-2">
+						<h2 class="text-emphasis text-sm font-semibold break-all min-w-0">
+							{((p) => (p.startsWith(rootPath) ? p.slice(rootPath.length) : p))(
+								fileMetadata.fileKey
+							)}
+						</h2>
+						{#if filePreview !== undefined && (!hideS3SpecificDetails || !readOnlyMode || allowDelete)}
+							<div class="flex gap-2 shrink-0">
+								{#if !hideS3SpecificDetails}
+									<Button
+										title="Download file from S3"
+										variant="default"
+										href={`${base}/api/w/${$workspaceStore}/job_helpers/download_s3_file?file_key=${encodeURIComponent(fileMetadata?.fileKey ?? '')}${storage ? `&storage=${storage}` : ''}`}
+										download={fileMetadata?.fileKey.split('/').pop() ?? 'unnamed_download.file'}
+										startIcon={{ icon: Download }}
+										iconOnly={true}
+									/>
+								{/if}
+								{#if !readOnlyMode}
+									<Button
+										title="Move file"
+										variant="default"
+										on:click={() => {
+											moveDestKey = fileMetadata?.fileKey ?? ''
+											moveModalOpen = true
+										}}
+										startIcon={{ icon: MoveRight }}
+										iconOnly={true}
+									/>
+								{/if}
+								{#if !readOnlyMode || allowDelete}
+									<Button
+										title="Delete file"
+										variant="default"
+										on:click={() => {
+											deletionModalOpen = true
+										}}
+										startIcon={{ icon: Trash }}
+										iconOnly={true}
+									/>
 								{/if}
 							</div>
-						{/snippet}
-					</Section>
+						{/if}
+					</div>
 					{#if !hideS3SpecificDetails}
 						<TableSimple
 							headers={['Last modified', 'Size', 'Type']}
@@ -652,51 +650,53 @@ $effect.pre(() => {
 							<Loader2 size={12} class="animate-spin mr-1" /> File preview loading
 						</div>
 					{:else if fileMetadata !== undefined && filePreview !== undefined}
-						<div class="flex items-center text-primary mb-4">
-							{#if filePreview.contentType === 'Unknown'}
-								Type of file not supported for preview.
-							{:else if filePreview.contentType === 'Csv'}
-								Previewing a {filePreview.contentType?.toLowerCase()} file. Separator character:
-								<div class="inline-flex w-12 ml-2 mr-2">
-									<select
-										class="h-8"
-										bind:value={csvSeparatorChar}
-										onchange={(e) =>
-											loadFilePreview(
-												fileMetadata?.fileKey ?? '',
-												fileMetadata?.size,
-												fileMetadata?.mimeType
+						{#if filePreview.contentType === 'Unknown' || filePreview.contentType === 'Csv' || !hideS3SpecificDetails}
+							<div class="flex items-center text-primary mb-4">
+								{#if filePreview.contentType === 'Unknown'}
+									Type of file not supported for preview.
+								{:else if filePreview.contentType === 'Csv'}
+									Previewing a {filePreview.contentType?.toLowerCase()} file. Separator character:
+									<div class="inline-flex w-12 ml-2 mr-2">
+										<select
+											class="h-8"
+											bind:value={csvSeparatorChar}
+											onchange={(e) =>
+												loadFilePreview(
+													fileMetadata?.fileKey ?? '',
+													fileMetadata?.size,
+													fileMetadata?.mimeType
+												)}
+										>
+											<option value=",">,</option>
+											<option value=";">;</option>
+											<option value="\t">\t</option>
+											<option value="|">|</option>
+										</select>
+									</div>
+									Header row:
+									<div class="inline-flex item-center w-4 ml-2 mr-2">
+										<input
+											onfocus={bubble('focus')}
+											onclick={bubble('click')}
+											disabled={false}
+											type="checkbox"
+											id="csv-header"
+											class="h-5"
+											bind:checked={csvHasHeader}
+											onchange={stopPropagation((e) =>
+												loadFilePreview(
+													fileMetadata?.fileKey ?? '',
+													fileMetadata?.size,
+													fileMetadata?.mimeType
+												)
 											)}
-									>
-										<option value=",">,</option>
-										<option value=";">;</option>
-										<option value="\t">\t</option>
-										<option value="|">|</option>
-									</select>
-								</div>
-								Header row:
-								<div class="inline-flex item-center w-4 ml-2 mr-2">
-									<input
-										onfocus={bubble('focus')}
-										onclick={bubble('click')}
-										disabled={false}
-										type="checkbox"
-										id="csv-header"
-										class="h-5"
-										bind:checked={csvHasHeader}
-										onchange={stopPropagation((e) =>
-											loadFilePreview(
-												fileMetadata?.fileKey ?? '',
-												fileMetadata?.size,
-												fileMetadata?.mimeType
-											)
-										)}
-									/>
-								</div>
-							{:else if !hideS3SpecificDetails}
-								Previewing a {filePreview.contentType?.toLowerCase()} file.
-							{/if}
-						</div>
+										/>
+									</div>
+								{:else}
+									Previewing a {filePreview.contentType?.toLowerCase()} file.
+								{/if}
+							</div>
+						{/if}
 						<pre class="grow whitespace-no-wrap break-words"
 							>{#if !emptyString(filePreview.contentPreview)}{filePreview.contentPreview}{:else if filePreview.contentType !== undefined}Preview impossible.{/if}
 					</pre>

package/package/components/ScriptEditor.svelte

@@ -71,12 +71,18 @@ let testPanelArgs = $state({});
 let testPanelSchema = $state(emptySchema());
 // editorCode is what the editor shows; code always holds the main script content
 let editorCode = $state(code);
-// Sync editorCode when code changes externally (template reset, copilot, etc.)
+// Sync editorCode when code changes externally (template reset, copilot,
+// new-script template init, etc.). We also re-run schema inference in that
+// case — otherwise if the code prop is set after ScriptEditor's onMount (as
+// happens on /scripts/add when initContent sets script.content after the
+// editor has already mounted with an empty string), the schema would stay
+// empty until the user typed into the editor.
 let lastSyncedCode = code;
 $effect.pre(() => {
     if (activeModuleTab === null && code !== lastSyncedCode) {
         editorCode = code;
         lastSyncedCode = code;
+        untrack(() => inferSchema(code));
     }
 });
 function switchToModule(modulePath) {
@@ -372,8 +378,9 @@ watch(() => inferAssetsRes.current, () => {
         if (old?.alt_access_type)
             asset.alt_access_type = old.alt_access_type;
     }
-    if (!deepEqual(assets, newAssets))
-        assets = newAssets;
+    const normalizedAssets = newAssets.length > 0 ? newAssets : undefined;
+    if (!deepEqual(assets, normalizedAssets))
+        assets = normalizedAssets;
 });
 watch([() => code, () => lang], () => {
     if (lang !== 'ansible')
@@ -882,8 +889,14 @@ $effect(() => {
         monacoEditor.updateOptions({ glyphMargin: false });
     }
 });
-onMount(() => {
-    inferSchema(code, { applyInitialArgs: true });
+onMount(async () => {
+    await inferSchema(code, { applyInitialArgs: true });
+    // Retry once if the initial inference failed silently (e.g. transient WASM
+    // init race). Without this, users had to modify the code to trigger a
+    // second on:change-driven inference.
+    if (!validCode && code && lang) {
+        await inferSchema(code, { applyInitialArgs: true });
+    }
     loadPastTests();
     aiChatManager.saveAndClear();
     aiChatManager.changeMode(AIMode.SCRIPT);

package/package/components/ShareModal.svelte.d.ts

@@ -16,7 +16,7 @@ declare const ShareModal: $$__sveltets_2_IsomorphicComponent<Record<string, neve
 } & {
     [evt: string]: CustomEvent<any>;
 }, {}, {
-    openDrawer: (newPath: string, kind_l: "resource" | "volume" | "script" | "flow" | "app" | "variable" | "schedule" | "raw_app" | "group_" | "http_trigger" | "websocket_trigger" | "kafka_trigger" | "nats_trigger" | "postgres_trigger" | "mqtt_trigger" | "gcp_trigger" | "sqs_trigger" | "email_trigger", isOwnerOverride?: boolean) => Promise<void>;
+    openDrawer: (newPath: string, kind_l: "resource" | "volume" | "script" | "flow" | "app" | "variable" | "schedule" | "raw_app" | "group_" | "http_trigger" | "websocket_trigger" | "kafka_trigger" | "nats_trigger" | "postgres_trigger" | "mqtt_trigger" | "gcp_trigger" | "azure_trigger" | "sqs_trigger" | "email_trigger", isOwnerOverride?: boolean) => Promise<void>;
 }, "">;
 type ShareModal = InstanceType<typeof ShareModal>;
 export default ShareModal;

package/package/components/apps/components/helpers/RunnableComponent.svelte.d.ts

@@ -84,6 +84,7 @@ declare const RunnableComponent: $$__sveltets_2_IsomorphicComponent<Props, {
             path?: string;
             lock?: string;
             cache_ttl?: number;
+            tag?: string;
         };
         id?: number;
         force_viewer_static_fields?: {
@@ -93,6 +94,8 @@ declare const RunnableComponent: $$__sveltets_2_IsomorphicComponent<Props, {
             [key: string]: unknown;
         };
         force_viewer_allow_user_resources?: Array<(string)>;
+        force_viewer_sensitive_inputs?: Array<(string)>;
+        force_viewer_delete_after_secs?: number;
         run_query_params?: {
             [key: string]: unknown;
         };

package/package/components/apps/components/helpers/executeRunnable.js

@@ -16,7 +16,8 @@ export async function executeRunnable(runnable, workspace, version, username, pa
                 language: inlineScript.language ?? '',
                 path: appPath + '/' + id,
                 lock: inlineScript.id === undefined ? inlineScript.lock : undefined,
-                cache_ttl: inlineScript.cache_ttl
+                cache_ttl: inlineScript.cache_ttl,
+                ...(inlineScript.tag ? { tag: inlineScript.tag } : {})
             };
         }
     }

package/package/components/apps/editor/AppReportsDrawerInner.svelte

@@ -47,7 +47,7 @@ $effect(() => {
 });
 let isSlackConnectedWorkspace = $state(false);
 async function getWorspaceSlackSetting() {
-    const settings = await WorkspaceService.getSettings({
+    const settings = await WorkspaceService.getPublicSettings({
         workspace: $workspaceStore
     });
     if (settings.slack_name) {

package/package/components/apps/editor/appPolicy.js

@@ -151,7 +151,8 @@ export async function processRunnable(id, runnable, fields, app) {
             {
                 static_inputs: staticInputs,
                 one_of_inputs: oneOfInputs,
-                allow_user_resources: allowUserResources
+                allow_user_resources: allowUserResources,
+                ...(runnable.inlineScript?.tag ? { tag: runnable.inlineScript.tag } : {})
             }
         ];
     }

package/package/components/apps/editor/commonAppUtils.d.ts

@@ -6,5 +6,8 @@ export type TriggerableV2 = {
     static_inputs: Record<string, any>;
     one_of_inputs?: Record<string, any[] | undefined>;
     allow_user_resources?: string[];
+    delete_after_secs?: number;
+    sensitive_inputs?: string[];
+    tag?: string;
 };
 export declare function hash(message: any): Promise<string>;

package/package/components/apps/editor/inlineScriptsPanel/CacheTtlPopup.svelte

@@ -22,7 +22,7 @@ let { cache_ttl = $bindable(), btnProps } = $props();
 			nonCaptureEvent={true}
 			btnClasses={Boolean(cache_ttl)
 				? 'bg-blue-100 text-blue-800 border border-blue-300 hover:bg-blue-200 dark:bg-frost-700 dark:text-frost-100 dark:border-frost-600'
-				: 'bg-surface text-primay hover:bg-hover'}
+				: 'bg-surface text-primary hover:bg-hover'}
 			color="light"
 			variant="contained"
 			size="xs2"

package/package/components/apps/editor/inlineScriptsPanel/InlineScriptEditor.svelte

@@ -16,6 +16,7 @@ import { scriptLangToEditorLang } from '../../../../scripts';
 import ScriptGen from '../../../copilot/ScriptGen.svelte';
 import DiffEditor from '../../../DiffEditor.svelte';
 import CacheTtlPopup from './CacheTtlPopup.svelte';
+import TagPopup from './TagPopup.svelte';
 import EditorSettings from '../../../EditorSettings.svelte';
 import { userStore, workspaceStore } from '../../../../stores';
 import TextInput from '../../../text_input/TextInput.svelte';
@@ -187,6 +188,12 @@ let extraLib = $derived(isFrontend && worldStore
 			{/if}
 			<div class="flex w-full flex-row gap-1 items-center justify-end">
 				{#if inlineScript}
+					{#if inlineScript.language != 'frontend'}
+						<TagPopup
+							bind:tag={inlineScript.tag}
+							btnProps={{ unifiedSize: 'sm', variant: 'subtle' }}
+						/>
+					{/if}
 					<CacheTtlPopup
 						bind:cache_ttl={inlineScript.cache_ttl}
 						btnProps={{ unifiedSize: 'sm', variant: 'subtle' }}